cPanel cross-site scripting vulnerability (CNVD-2019-26209)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 66.0.2. The vulnerability stems from a lack of proper...

cPanel cross-site scripting vulnerability (CNVD-2019-26204)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of proper...

Central Dogma Cross-Site Scripting Vulnerability

Central Dogma is an open source service configuration version control repository based on Git, ZooKeeper and HTTP/2. A cross-site scripting vulnerability exists in Central Dogma versions 0.17.0 through 0.40.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB...

SunHater KCFinder Cross-Site Scripting Vulnerability

SunHater KCFinder is an open source file manager. A cross-site scripting vulnerability exists in SunHater KCFinder. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...

EspoCRM Cross-Site Scripting Vulnerability (CNVD-2019-24797)

EspoCRM is an open source web-based customer relationship management CRM system. The system provides features such as sales automation, community and customer support. A cross-site scripting vulnerability exists in EspoCRM versions prior to 5.6.6. The vulnerability stems from the WEB application...

MISP Cross-Site Scripting Vulnerability (CNVD-2020-22366)

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. MISP suffers from a cross-site scripting vulnerability. The vulnerability stems from a lac...

HisiPHP Cross-Site Scripting Vulnerability

HisiPHP is a set of rapid development framework based on ThinkPHP and Layui, which integrates permission management, module management, plugin management and database management. A cross-site scripting vulnerability exists in hisiphp version 1.0.8. The vulnerability stems from the lack of proper...

CVE-2019-2305

CVE-2019-2305 corresponds to an out-of-bounds access in processing where the reason code is extracted from frame data without validating the frame length. Affected are Snapdragon platforms across multiple product families (Snapdragon Auto, Consumer Electronics Connectivity, Consumer IoT, Industri...

Apple Safari operationPutByValOptimize Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

LayerBB cross-site scripting vulnerability (CNVD-2019-24206)

LayerBB is a small set of forum software. A cross-site scripting vulnerability exists in LayerBB version 1.1.3. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute client-side code...

OTCMS cross-site scripting vulnerability (CNVD-2019-24208)

OTCMS Nettie CMS is an article-based web content management system CMS. A cross-site scripting vulnerability exists in OTCMS version 3.81. The vulnerability stems from the lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability to execute...

WordPress WebAppick WooCommerce Product Feed Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WebAppick WooCommerce Product Feed is a plugin used in WordPress to generate product feed data. A cross-site scripting...

RANGER Studio Directus Cross-Site Scripting Vulnerability

RANGER Studio Directus is the United States RANGER Studio company's set of open source for managing custom databases open source headless CMS and API. A cross-site scripting vulnerability exists in the interfaces/markdown/input.vue file in RANGER Studio Directus version 7 prior to Application...

The vulnerability of the goldendict software package for the Astra Linux operating system arises from a validation error in the input data received from web servers. This error allows attackers to trigger a service failure.

The vulnerability of the goldendict software package for the Astra Linux operating system is related to a validation error in the input data received from web servers. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Huawei PC Manager Authorization Issues Vulnerability

Huawei PC Manager is a computer management application from Huawei China. An authorization issue vulnerability exists in Huawei PC Manager version 9.1.3.1, which arises from the driver's interface not adequately validating data from the userland. An attacker could exploit the vulnerability to...

ZTE OTCP Cross-Site Scripting Vulnerability

ZTE OTCP is a set of next-generation network management platform products from China's ZTE Corporation ZTE. A cross-site scripting vulnerability exists in ZTE OTCP 1.19.20.02 and earlier versions. The vulnerability stems from the lack of proper validation of client data by the WEB application. An...

Emoncms Cross-Site Scripting Vulnerability (CNVD-2019-22862)

Emoncms is an open source web application. The program is primarily used to process, record and display energy, temperature and other environmental data. A cross-site scripting vulnerability exists in Emoncms version 9.8.8. The vulnerability stems from the WEB application's lack of proper...

GNU C Library Buffer Overflow Vulnerability (CNVD-2019-23063)

The GNU C Library glibc, libc6 is an open-source, free C compiler released under the LGPL license. A buffer overflow vulnerability exists in nptl in the GNU C Library. The vulnerability arises from a networked system or product performing operations in memory without properly validating data...

InterSystems Cache Cross-Site Scripting Vulnerability

InterSystems Cache is a database management system from InterSystems, Inc. in the United States. The system is primarily used for the development of software applications in healthcare management, banking and financial services, government and other industries. A cross-site scripting vulnerabilit...

Microsoft Excel Filename Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The issue results from the lack of proper...